Can't Promote or Demote DC

[Francisco]

I get the following error:
The operation failed becuase: Failed to modify the
necessary properties for the machine account "Machine"
"Access Denied"

The accnt's I tried have domain admin and enterprise
admin access.


Thanks,
Francisco

 

[Tim Hines [MSFT]]

That error can occur if the administrators groups does not have the
following right ""Enable Computer and User Accounts to be trusted for
Delegation" . See the article below for more details.

232070 "Access Denied" During Domain Controller Promotion
http://support.microsoft.com/?id=232070


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.